Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: MbipiWIejyPGIUJM5H09CFQPEmZ7kaMMdsESi9HaTfw=
Subject key identifier: 5E:20:1F:1C:15:62:CE:84:87:B3:EF:71:DC:A4:9A:37:A5:BE:27:53
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 019759B6A5893E87F6E0054ABDFF3964616C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 03CB
Signing time: Tue 10 Jun 2025 12:00:31 +0000
Manifest this update: Tue 10 Jun 2025 12:00:31 +0000
Manifest next update: Wed 11 Jun 2025 12:00:31 +0000
Files and hashes: 1: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: KDdV5XSh1V7Or+eEb4cADOBUrPLBkV2Z4sEEZZ4lzZY=)
2: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (hash: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:a5:89:3e:87:f6:e0:05:4a:bd:ff:39:64:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Jun 10 12:00:31 2025 GMT
Not After : Jun 11 12:00:31 2025 GMT
Subject: CN=5e201f1c1562ce8487b3ef71dca49a37a5be2753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:11:cd:a9:80:f2:de:bd:ee:b9:e3:aa:76:
b7:96:a8:90:69:df:b4:68:86:71:4e:dc:50:e2:4d:
af:b5:f4:9e:1b:c2:d5:dc:a7:ba:f8:89:c6:2a:17:
11:7f:2c:2a:73:e8:6b:02:41:a3:48:6c:d4:5b:55:
ee:85:77:2a:36:82:c3:3d:1a:18:b2:dd:2b:56:e3:
5c:c8:97:aa:89:1d:a7:d4:f8:70:4b:6b:a5:21:62:
ee:5b:59:de:53:2f:09:b9:d7:bd:36:6c:25:dc:14:
e8:05:05:92:52:40:d5:06:56:03:45:e0:9c:a3:ee:
c4:31:d9:49:0b:a7:55:57:75:cd:04:8c:1a:19:ce:
0c:dd:56:8f:4e:42:18:51:fb:55:96:73:7a:6e:59:
a0:99:a1:b3:99:b4:a9:21:76:49:2f:ad:35:f8:8c:
be:f9:cb:e3:1e:92:9c:7d:8a:55:da:b9:53:93:7c:
9b:51:cb:61:0e:d2:b9:f0:95:00:2b:61:d1:ec:bf:
30:91:87:c6:91:eb:16:0b:5d:2e:a2:59:e5:64:15:
bd:d2:04:5a:82:ed:66:fd:75:3b:d2:2d:bd:2a:27:
94:5d:03:58:9c:a9:8d:52:7b:39:78:59:8a:19:5d:
bf:fd:79:19:53:b2:b3:17:d0:12:55:14:ad:04:88:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:20:1F:1C:15:62:CE:84:87:B3:EF:71:DC:A4:9A:37:A5:BE:27:53
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e5:ac:b8:9e:2f:0e:99:ab:86:71:21:3c:1f:05:32:5c:6c:
7f:21:07:2b:11:48:a1:5f:1f:61:1f:e2:fd:93:64:2b:c7:ec:
1d:cf:8d:5e:ef:02:c8:bb:31:d6:9b:7f:8c:bb:b3:8f:59:a4:
ef:e7:78:0e:d3:da:99:fe:05:7d:2a:7d:91:5c:40:c4:37:ee:
c7:b8:a0:ed:97:7f:22:0d:9a:ad:41:f1:85:8d:10:d3:20:2a:
10:89:62:4c:94:b0:46:e2:a5:e6:89:41:5d:67:66:07:be:7d:
71:05:f4:20:09:9e:9f:14:a9:a6:be:8c:d2:f6:5b:a3:31:e5:
e5:b6:98:70:bd:cb:ad:1e:32:3c:10:e1:b8:21:6c:45:6e:18:
85:4c:16:2c:a3:4e:f0:66:4b:54:16:27:f9:68:e2:df:a9:a6:
b8:9a:ca:16:18:ea:7b:38:76:33:d9:12:ab:5d:df:3a:5f:bd:
22:ce:23:1b:d1:ac:5a:65:33:b9:45:07:58:ad:9d:a5:1e:52:
94:5b:c0:6b:77:50:b5:b0:95:ef:5e:30:6e:b4:dd:30:9e:74:
ea:e3:75:14:48:5b:77:87:4b:91:29:60:19:b2:fb:a5:a0:06:
4d:83:c4:ef:1f:3d:0b:5b:51:a2:35:54:4e:0c:e0:37:61:eb:
80:83:d2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:04:01 2025 by rpki-client